chore(main): release 2.4.0

[github-actions]

🤖 I have created a release beep boop

2.4.0 (2026-02-03)

Features

• add direct sessions API for browser/CLI clients (c34ab3c)
• add direct sessions API for browser/CLI clients (8f78d87)
• add github package support and enable plan mode (b9ccf5d)
• add network isolation, HTTP proxy, and enhanced worker configuration (d3a7db1)
• add platform-agnostic messaging API with self-queueing and MAX_TURNS protection (c872522)
• add user interaction system with forms and suggestions (18db834)
• implement multi-tenant space architecture (abc195f)
• implement multi-tenant space architecture (16b8723)
• improve first-time setup UX and add upgrade instructions (e3df936)
• migrate gateway to Hono and remove Express from worker (#94) (499ab1b)

Bug Fixes

• address critical security and functionality issues in direct sessions API (782f617)
• improve team ID handling in Slack events (d083365)
• remove CLI_VERSION pinning, use latest for worker package (9c33352)
• resolve K8s deployment issues (9d48358)
• resolve K8s deployment issues (dcd6eff)
• restart stream on message_not_in_streaming_state error (32db4a1)

---

This PR was generated with Release Please. See documentation.

[mesa-dot-dev]

Mesa Description

TL;DR

Release 2.4.0 introduces major architectural improvements including multi-tenant spaces, platform-agnostic messaging APIs, direct session support, and migrates the gateway to Hono. Also adds GitHub package support, network isolation, and improved setup UX.

What changed?

• Architecture: Implemented multi-tenant space architecture and direct sessions API for browser/CLI clients
• Gateway: Migrated gateway from Express to Hono, removing Express dependency from worker
• Messaging: Added platform-agnostic messaging API with self-queueing and MAX_TURNS protection
• Worker Configuration: Added network isolation, HTTP proxy, and enhanced worker configuration options
• Package Support: Added GitHub package support and enabled plan mode
• User Experience: Implemented user interaction system with forms and suggestions; improved first-time setup UX with upgrade instructions
• Security & Stability: Fixed critical security issues in direct sessions API, improved team ID handling in Slack events, resolved K8s deployment issues, fixed stream restart on message_not_in_streaming_state errors
• Dependencies: Removed CLI_VERSION pinning to allow latest worker package versions

^{Description generated by Mesa. Update settings}

[mesa-dot-dev]

Performed full review of 499ab1b...2c64fb4

Analysis

1. While this PR only updates version metadata (low risk), it consolidates multiple significant architectural changes that were already merged, including framework migration, multi-tenant architecture, and new APIs.

2. The changelog mentions "critical security and functionality issues in direct sessions API" suggesting security vulnerabilities that should be verified as properly addressed.

3. Duplicate entries in the changelog for "direct sessions API" and "multi-tenant space architecture" may indicate merge or rebase artifacts that should be cleaned up.

4. The PR represents substantial architectural evolution (Express to Hono migration, multi-tenant architecture, messaging abstraction layers, security enhancements) that might require comprehensive testing to ensure stability.

5. As this appears to be a stabilization release following major architectural changes, additional verification of the referenced bug fixes (K8s deployment issues) may be warranted before merging.

Tip

Help

Slash Commands:

• /review - Request a full code review
• /review latest - Review only changes since the last review
• /describe - Generate PR description. This will update the PR body or issue comment depending on your configuration
• /help - Get help with Mesa commands and configuration options

^{0 files reviewed | 0 comments | Edit Agent Settings • Read Docs}

[buremba]

Closing stale PR - replaced by #96 after peerbot → termos rename